Hack In The Box Security Conference Courses

ICEFALL - Revisiting A Decade Of OT Insecure-By-Design Practices

Revisiting insecure-by-design practices in OT devices, highlighting persistent security issues across industries and critical infrastructure, with technical deep-dives and implications for risk management.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Fuzzing the MCU of Connected Vehicles for Security and Safety

Fuzzing techniques for MCU security in connected vehicles, using ARM ETM and code coverage-guided approach to enhance vulnerability detection and system robustness.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Code Intention Hiding Based on AI Uninterpretability

Explore AI-based framework for concealing attack intentions and protecting codes. Learn about Deep Puzzling, its core ideas, key points in data collection, feature extraction, and binary code generation modeling.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Healthcare at a Fever Pitch - Biohacking Village

Panel discussion on cybersecurity challenges in healthcare, exploring device vulnerabilities, patient data protection, and industry responses. Experts share insights on improving security practices and addressing emerging threats in biomedical technology.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

DeFi - Crypto Cyber Security Challenges

Overview of DeFi cybersecurity challenges, common attacks, and potential solutions. Explores smart contract vulnerabilities, bad practices, and strategies to enhance security in the rapidly growing decentralized finance ecosystem.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Hack In The Studio - Fireside Chat with Mouza Al Romaithi

Insightful discussion with cybersecurity leader Mouza Al Romaithi on industry challenges, career growth, and the evolving threat landscape in the digital age.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

From a Workplace to a Workforce

Exploring pandemic-driven shifts in workplace security, this talk presents a model for protecting distributed workforce data and reducing organizational risk through adaptive access control.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

A Retro- and Introspective of the State of Cyber

Análisis retrospectivo e introspectivo del estado de la ciberseguridad, explorando desafíos actuales, prácticas efectivas y tecnologías emergentes para mejorar la resiliencia y postura de seguridad.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Knockin' On MediaTek ADSP's Door

Reverse engineering MediaTek's audio DSP firmware reveals vulnerabilities in RTOS and Android HAL, potentially enabling local privilege escalation and eavesdropping on user conversations.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Response Smuggling - Pwning HTTP/1.1 Connections

Explore advanced HTTP response smuggling techniques, including protocol vulnerabilities, session hijacking, and response scripting, with real-world demonstrations on major ERP systems.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Who Littered the Sandbox? Scooping Up New Malware Behavior

Explore large-scale malware behavior analysis using sandbox telemetry. Gain insights into infection patterns, commonalities, and evolving tactics to improve detection and mitigation strategies.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Rage Against The Machine Clear

Explore new root causes of transient execution attacks, including machine clears, and discover novel attack primitives like Floating Point Value Injection and Speculative Code Store Bypass.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Software Security Analysis - Present and Future Research Initiatives

Explore software security analysis, covering vulnerability detection, attack mitigation, and automated exploit generation. Learn about cutting-edge research initiatives in program comprehension and security testing techniques.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

MIPS-X - The Next IoT Frontier

Explore MIPS-based IoT device research with a framework for efficient emulation, vulnerability analysis, and exploit development. Gain insights into CPU architectures, virtualization, and cross-compilation techniques.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Low Level BootROM Protocol Fuzzing Secure Memory Regions

Explore low-level protocol fuzzing for secure microcontrollers, uncovering vulnerabilities in BootROM USB drivers. Learn about a custom fuzzing framework for SPI, I2C, USB, and UART, and its application in hardware security research.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk